all views require login now, added base template all other templates extend now, use url tag instead of fixed urls